5.9
Medium
CVE-2024-6388 Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to…
Description
Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon, before version 1.12, leaks the Pro token to unprivileged users by passing the token as an argument in plaintext.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu_advantage_desktop_pro 1.12 | earliest → < 1.12 | 1.12 |
| Ubuntu Advantage Desktop Pro 1.12 | earliest → < 1.12 | 1.12 |
References
- bugs.launchpad.net bugs.launchpad.net
- www.cve.org www.cve.org
- github.com github.com
Timeline
- Published
- Last modified